ci: vuln scan: migrate to sonatype guide

Closes #242

Author: lread

doc/02-developer-guide.adoc

@@ -118,14 +118,14 @@ If you want to run this work locally, you can for example:
 [source,shell]
 ----
 CLJ_WATSON_NVD_API_KEY=<your-nvd-token-here> \
-  CLJ_WATSON_ANALYZER_OSSINDEX_USER=<your-ossindex-user-here> \
-  CLJ_WATSON_ANALYZER_OSSINDEX_PASSWORD=<your-ossindex-password-here> \
+  CLJ_WATSON_ANALYZER_OSSINDEX_USER=<your-sonatype-guide-user-here> \
+  CLJ_WATSON_ANALYZER_OSSINDEX_PASSWORD=<your-sonatype-guide-api-token-here> \
   bb nvd-scan
 ----
 
 Replace `<your-nvd-token-here>` with your personal nvd api token which you can easily request from https://nvd.nist.gov/developers/request-an-api-key.
 
-Replace `<your-ossindex-user-here>` and `<your-ossindex-password-here>` with your ossindex credentials which you can create from https://ossindex.sonatype.org/user/register.
+Replace `<your-sonatype-guide-user-here>` and `<your-sonatype-guide-api-token-here>` with your sonatype credentials which you can create from https://guide.sonatype.com/.
 
 === Unused Deps
 Pomegranate should only be including deps that are needed.

nvd-scan/clj-watson.properties

@@ -1 +1,2 @@
 suppression.file=suppressions.xml
+analyzer.ossindex.url=https://api.guide.sonatype.com